The IoT security bill is a step in the right direction, as it addresses one of the biggest gaps in software security overall — generating awareness. But is it enough?